Privacy

I am Yuriy Babyak, trading as LittleBit.dev Yuriy Babyak, ul. Stefana Batorego 18/108, 02-591 Warszawa, Poland, NIP 5273196766.
I am responsible for the personal data this site handles.
Write to yuriy@littlebit.dev about anything here.

This page covers this site, emails and calls.
It does not cover research data I handle for clients.

Visiting the site

Cloudflare hosts the site.
It processes what your browser sends, including your IP address, to deliver pages and keep the site secure.
Cloudflare keeps this data for its standard period, set out in its privacy policy.

The legal basis is my legitimate interest in running a working, secure site (Art. 6(1)(f) GDPR).

The site sets no cookies.
If you pick a light or dark theme, your browser remembers that choice on your device until you clear the site's data.

How I measure visits

The site has its own analytics.
It records the pages you open, the sections you reach, clicks on links and buttons, page speed, your coarse location, browser and device.
The data goes through littlebit.dev to PostHog Inc., which keeps it in the EU, in Frankfurt.
PostHog uses your IP address to work out the coarse location.
PostHog keeps the data for 12 months.

To tell visits apart, your browser keeps a random ID, lb_id, in its local storage.
The ID lasts up to 13 months, or until you clear the site's data.

The legal basis is my legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).
You can object at any time: write to me, or open littlebit.dev/?lb-notrack, and this browser sends no more analytics.

When you write or book a call

I use your name, email address and what you write or enter when booking.
I use them to reply, hold the call and, if it leads to work together, prepare that work.

The legal basis is steps you ask for before a contract (Art. 6(1)(b) GDPR) or my legitimate interest in answering messages (Art. 6(1)(f) GDPR).

Messages pass through my email provider, Fastmail.
Bookings go through Cal.com, which adds them to my Google Calendar with a Google Meet link.

Bookings after a visit

When you open my booking link from this site, the link passes your random ID, lb_id, and the ID of your current visit on to Cal.com.
Cal.com sends it back to me with your booking.
PostHog then holds your email address with the booking, linked to your earlier visits on this site.
A booking made without a visit to the site is recorded in PostHog by its email address alone.

The legal basis is my legitimate interest in knowing which pages lead to a call (Art. 6(1)(f) GDPR).

PostHog keeps these events for 12 months.
It keeps the record of you, with your email address, until I delete it.

You can object at any time, or ask me to delete it: write to me.
littlebit.dev/?lb-notrack stops tracking in this browser, but deletes nothing.

Updates by email

If you subscribe, I use your email address to send you updates from littlebit.dev, such as the benchmark results.
Only updates and important emails.

You confirm with the link in the first email.
Until you do, your address is not added to the list.

Resend (Plus Five Five, Inc., USA) sends these emails and stores the list in the US.
It keeps a log of the emails it sends for its standard period, set out in its privacy policy.

Links in these emails go through Resend, which records which ones you click, so I see what people read.
I don't track whether you open an email.

The legal basis is your consent (Art. 6(1)(a) GDPR).

Every email has a link to unsubscribe, or you can write to me.
Withdrawing consent does not affect emails already sent.
I keep your address on the list until you unsubscribe or ask me to delete it.
After you unsubscribe, Resend keeps it marked as unsubscribed, so no more emails reach you; ask me and I delete it.

Outside the EU

Cloudflare, PostHog, Cal.com, Google and Resend are US companies.
Transfers to them rely on the EU-U.S. Data Privacy Framework or the EU standard contractual clauses.
Fastmail is Australian.
Transfers to Fastmail rely on the EU standard contractual clauses.

How long I keep it

If we work together, I keep our messages and bookings for 6 years after the work ends, for tax records and in case of a claim.
If we don't, I keep them for 3 years after the last contact.

Your rights

You can ask to see, correct or delete your data, restrict its use, or take a copy.
Write to yuriy@littlebit.dev; I answer within one month, as the GDPR requires.

You can object at any time to processing based on my legitimate interest.

I make no automated decisions about you.

You can complain to UODO, the Polish data protection authority (uodo.gov.pl), or to the authority in your EU country.